Aaron Parecki

@matt@biddul.ph https://twitter.com/mattb • Apr 9
@aaronpk I already upgraded that box to 13.10 in order to upgrade to the fixed version listed in http://www.ubuntu.com/usn/usn-2165-1/

@mattb Yeah it seems to be unique to 12.04 LTS. I need to use the LTS version, not willing to upgrade to 13 tho.

Portland, Oregon, USA

Tue, Apr 8, 2014 5:13pm -07:00
@matt@biddul.ph https://twitter.com/mattb • Apr 9
@aaronpk on my box I got "OpenSSL 1.0.1e 11 Feb 2013". perhaps you really do have exactly version 1.0.1?

@mattb Are you running Ubuntu 12.04?

Portland, Oregon, USA

Tue, Apr 8, 2014 5:10pm -07:00
@matt@biddul.ph https://twitter.com/mattb • Apr 9
@aaronpk you can also do this to get the specific openssl version: strings /lib/x86_64-linux-gnu/libssl.so.1.0.0 | grep "^OpenSSL "

@mattb Unfortunately that *also* just returns "OpenSSL 1.0.1 14 Mar 2012". Thanks Ubuntu.

Portland, Oregon, USA

Tue, Apr 8, 2014 5:09pm -07:00
Erik Berlin https://twitter.com/sferik • Apr 8
@aaronpk @JamesChevalier Wow. That’s horrible.

@sferik Yep. I managed to track it down tho: http://aaronparecki.com/articles/2014/04/08/1/ #heartbleed

Portland, Oregon, USA

Tue, Apr 8, 2014 4:57pm -07:00 #heartbleed
https://twitter.com/veganstraightedge/status/453680134159994880

@veganstraightedge Actually looks like Instagram is 500'ing for me...

Portland, Oregon, USA

Tue, Apr 8, 2014 4:50pm -07:00 #flickstagram
How to test and confirm OpenSSL is updated for Nginx and Ruby on Ubuntu 12.04

A quick guide to updating OpenSSL on Ubuntu 12.04 running Nginx and Ruby and verifying that your system is safe from the Heartbleed bug.
continue reading...

7 likes 6 reposts 11 replies 2 mentions

Tue, Apr 8, 2014 3:16pm -07:00 #heartbleed #ops #ubuntu #linux #openssl #ssl
Erik Berlin https://twitter.com/sferik • Apr 8
To check the version of OpenSSL Ruby was built with:
ruby -r openssl -e 'puts OpenSSL::OPENSSL_VERSION'
Anything below 1.0.1g is vulnerable.

@JamesChevalier @sferik Thanks but on Ubuntu `openssl version` always says "OpenSSL 1.0.1 14 Mar 2012" even for the correctly patched version. #heartbleed http://askubuntu.com/questions/444702/how-to-patch-cve-2014-0160-in-openssl

Portland, Oregon, USA

2 replies

Tue, Apr 8, 2014 3:06pm -07:00 #heartbleed
So uh, how can I confirm my Ruby is actually using the recompiled OpenSSL (Ubuntu 12.04) #heartbleed

Portland, Oregon, USA

1 reply

Tue, Apr 8, 2014 2:59pm -07:00 #heartbleed
Let me rephrase that: If you run an API that sends webhooks, your users can #heartbleed your API servers

Portland, Oregon, USA

1 like 4 reposts 1 reply

Tue, Apr 8, 2014 1:26pm -07:00 #heartbleed
So wait, a malicious server can also #heartbleed clients too?

Portland, Oregon, USA

Tue, Apr 8, 2014 12:59pm -07:00 #heartbleed
12:43am
Asleep

7:21am
Awake

6h 37m
Slept

21m
Awake for

Home in Portland, Oregon, USA

Tue, Apr 8, 2014 7:21am -07:00
R ¥△N W△¥ N E https://twitter.com/stopitbrrruce • Apr 7
@aaronpk flickstagram not updating my flickr again

@stopitbrrruce I restarted it this morning, working for you now?

Portland, Oregon, USA

Mon, Apr 7, 2014 10:41pm -07:00
11
Pushups

Mon, Apr 7, 2014 8:43pm -07:00
http://ben.thatmustbe.me/post/2014/3/24/1/Episode_IV_A_New_Home

@ben.thatmustbe.me Nice website design, and congrats on getting your site set up!

Portland, Oregon, USA

Mon, Apr 7, 2014 12:06pm -07:00
7 things I wish every search box did (insideintercom.io)

Mon, Apr 7, 2014 9:56am -07:00 #search #UI #web
Walk

1.70mi
Distance

30:23
Duration

7:59am
Start

8:29am
End

Home in Portland, Oregon, USA

Mon, Apr 7, 2014 8:29am -07:00
151.1lbs
Weight

17.2%
Body Fat

Mon, Apr 7, 2014 7:24am -08:00
10:08pm
Asleep

7:13am
Awake

9h 05m
Slept

47m
Awake for

Home in Portland, Oregon, USA

Mon, Apr 7, 2014 7:13am -07:00
Perfect day #pdx

Sun, Apr 6, 2014 8:04pm -07:00 #pdx
Whiteboard Picture Cleaner (gist.github.com)

Shell one-liner/script to clean up and beautify photos of whiteboards!

Sun, Apr 6, 2014 3:25pm -07:00 #whiteboard

older

Aaron Parecki

How to test and confirm OpenSSL is updated for Nginx and Ruby on Ubuntu 12.04